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DETAILED ACTION 
Continued Examination Under 37 CFR 1.114 

A request for continued examination under 37 CFR 1.114, including the fee set forth in 
37 CFR 1.17(e), was filed in this application after final rejection. Since this application is eligible 
for continued examination under 37 CFR 1 . 1 1 4, and the fee set forth in 37 CFR 1 . 1 7(e) has 
been timely paid, the finality of the previous Office action has been withdrawn pursuant to 37 
CFR 1.114. Applicant's submission filed on 08/31/2007 has been entered. 

Response to Arguments 

Claim Rejections - 35 USC §112. first paragraph 

Applicant's arguments with respect to the rejection under 35 U.S.C. '§112, first 
paragraph, have been fully considered and are persuasive. The rejection of claims 1 , 7 and 13- 
16 has been withdrawn. 

Claim Rejections - 35 USC §112. first paragraph 

The rejection under 35 U.S.C. § 1 12, second paragraph, has been withdrawn in view of 
the amendment of claims 1-8, 11 and 12. 

Claim Rejections - 35 USC S 103 

Applicant's arguments with respect to the rejection under 35 U.S.C. § 103 have been 
considered but are moot in view of the new ground(s) of rejection. 
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Duplicate Claims, Warning 

Applicant is advised that should claim 1, 7 and 13 be found allowable, claims 14-18 will 
be objected to under 37 CFR 1 .75 as being a substantial duplicate thereof. When two claims in 
an application are duplicates or else are so close in content that they both cover the same thing, 
despite a slight difference in wording, it is proper after allowing one claim to object to the other 
as being a substantial duplicate of the allowed claim. See MPEP § 706.03(k). 

Claim Rejections - 35 USC §112 

The following is a quotation of the first paragraph of 35 U.S.C. 112: 

The specification shall contain a written description of the invention, and of the manner and process of 
making and using it, in such full, clear, concise, and exact terms as to enable any person skilled in the 
.art to which it pertains, or with which it is most nearly connected, to make and use the same and shall 
set forth the best mode contemplated by the inventor of carrying out his invention. 

Claims 1, 7 and 13-16 are rejected under 35 U.S.C. 112, first paragraph, as failing 
to comply with the written description requirement. The claim(s) contains subject matter 
which was not described in the specification in such a way as to reasonably convey to 
one skilled in the relevant art that the inventor(s), at the time the application was filed, 
had possession of the claimed invention. 

As recited in Claims 1 and 7, the Claimed limitation, said access criteria comprising criteria 
selected from the group consisting of trade secret criteria, confidentiality among business partners criteria, 
established business relationship criteria, confidential information criteria,..., host status, guest status, original 
equipment manufacturer status, contract equipment manufacturer status, and user ID, was not described in 
the specification. 
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As recited in Claim 7, the Claimed limitation, allowing controlled access to individual groups of 
data contained within said requested object according to an individual user's predetermined privileges in 
response to said access criteria associated with said groups of data contained within said redacted object, was 

not described in the specification. 

Claim Rejections -35 USC §102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351(a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

Claims 1-9 and 11-19 are rejected under 35 U.S.C. 102(e) as being anticipated by 
Gervais et al. [US 6,381,579 B1]. 

Regarding claims 1, 17 and 18, Gervais teaches a method and a business-entity data- 
exchange system/or providing the transfer of and the controlled access to a version of an object and other 
associated information of a file by a plurality of users from different business entities, said business entities being 
business partners or potential business partners producing products and component parts from different 
companies throughout a product supply chain (Gervais, Abstract). The Gervais system comprises: 

a database for storing an object and associated information (Gervais, FIG. 5 illustrates a 
database for storing "Xspan Briefing Center" resource as operand "AAA Supplier Network", 

"Project Alpha" and "Project Omega" as associated information), the object comprising distinguishable 
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groups of data (The "Xspan Briefing Center" comprising "AAA Supplier Network", "Project Alpha" 

and "Project Omega" as distinguishable groups of data), 

each group of data having associated access criteria for access to the groups of data (Gervais, 
Col. 9 Lines 60-67, read and read/write access criteria); 

said data comprising multiple elements selected from the group consisting of product data, 
supply chain data, component part data, subcontracting company data, partnership data, design data, 
development data, access privilege data, trade secret data, confidential information data, business 
relationship data, business document data, business agreements data, OEM products and component 
data, CEM products and component data, bill of material data, change order data, component part 
object data, component part linking data, component part identification data, component part number 
data, part attribute data, part affiliation data, part product context data, specifications drawing data, 
color data, size data, type data, price data, quantity data, find number data, cross reference data, related 
information data, earlier version data, history of change data, text document data, graphics drawing 
data, other attribute data, redacted data, discovery privilege data, cost data, component parts 
specifications data, product specifications data quantity received data, quantity needed data, availability 
data, supplier type data, geographical information, and purchase order data (As Shown in FIG. 5, 
data comprising "AAA Supplier Network" as supply chain data and "Project Alpha" and 
"Project Omega" as business document data)] 

said access criteria comprising criteria selected from the group consisting of trade secret 
criteria, confidentiality among business partners criteria, established business relationship criteria, 
confidential information criteria, predetermined privileges set by the owner of the information criteria, 
host status, guest status, original equipment manufacturer status, contract equipment manufacturer 

status, and user id (Access criteria comprising read and read/write as privileges (Gervais, 
Col. 9 Lines 60-67). The read and read/write criteria are predetermined by the owner of 
the resource (Gervais, Col. 11 Lines 17-39)); 
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an application server configured with memory and operation software code to control access to data 
stored in the database and to set up and send a document file having a representation of an object and associated 
documents that are stored in the database (EnterpriseXspan Environment Server (Col. 4 Lines 30-33) 
as an application server. The memory and operation software code are inherited features of 
EnterpriseXspan Environment Server. EnterpriseXspan Environment Server control access to data 
stored in the database, e.g., "Xspan Briefing Center", "AAA Supplier Network", "Project Alpha" and 
"Project Omega" by checking user identity and authenticate using Lotus Domino Application 
(Gervais, Col. 10 Lines 1-5). The Lotus Domino Application determines who can read and edit 
the document. If a user is rejected by the application, that document will not appear to that 
rejected user (Gervais, Col. 10 Lines 6-13). As seen, access to a document with associated 
documents in FIG. 5, e.g., "AAA Supplier Announcements" and associated "Project Alpha" and 

"Project Omega", as a document file having a representation of an object and associated documents that are 
stored in the database is controlled by Lotus Domino Application); 

access data application code stored in the memory and executable by the application server (Name and 
Address Book is used by Lotus Domino Application to control access based on Reader and 
Author name fields in Name and Address Book (Gervais, Col. 10 Lines 1-13). The Reader and 

Author name as access data application code is executable by Lotus Domino Application as the 
application server. Storing the Reader and Author name in the memory is an inherited feature of 
Gervais technique), 

said access data application code being responsive to said access criteria associated with said 
groups of data contained within a version of an object and to predetermined modification privileges for 
allowing controlled access to modify individual groups of data contained within the version of the object 
by an individual user (Each entity in the system hierarchy of containers and resources has 
both a group of users and a group of managers. The user group has read access and 
the management group has read/write access to the entity (Gervais, Col. 9 Lines 60-67). 
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As shown in FIG. 7, the string "$Managers" is used to represent the group of all system 
managers in the NetTop Hierarchy and the string "$Users" is used to represent the 
group of all users in the hierarchy. String such as "M1'\ "M2" and "M3" are used to 
represent individual users for creating and managing the resources. Strings such as 
"U1\ "U2" and "U3" are used to represent users for viewing the resources only (Gervais, 
Col. 1 1 Lines 26-39). The Gervais teaching as discussed indicates access data application 
code in the form of Reader and Author names, e.g., "M1", "M2", "M3", U1", ll U2" and ll U3", 
being responsive to said access criteria associated with said groups of data contained within a version of 
an object, e.g., read and read/write access criteria associated with "AAA Supplier 
Announcements", "Project Alpha" and "Project Omega" within "Xspan Briefing Center" in 
the original version, and to predetermined modification privileges for allowing controlled access to 
modify individual groups of data contained within the version of the object by an individual user, e.g., 
predetermined read/write privileges for modifying "AAA Supplier Announcements", 
"Project Alpha" and "Project Omega" within "Xspan Briefing Center" in the original 
version by a user that has the privilege); 

and wherein the version of the object may be viewed or modified by said individual user, herein 
termed a requested object, is a redacted version where the data that is redacted varies according to said 
individual user's predetermined access or modification privilege (As disclosed by Gervais, if a 

user's name is not in the Reader Names field of Name and Address Book, then that 
document will not appear to the user through an interface (Gervais, Col. 10 Lines 10-13). 
Thus, the original version of "Xspan Briefing Center" may be viewed by individual user is 
a redacted version, e.g., documents will not appear if the user does not have access to 
them, and the documents which are redacted varies according to predetermined read 
access); 
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and in which said predetermined access or modification privileges of said individual user vary 
according to the status of the business partnership between the business entity that said individual user 
is affiliated with and the business entity that controls said data exchange system (The predetermined 

read and read/write accesses vary according to the status of business partnership 
between the business entity that the user is affiliated with as in FIG. 6A and the system 
administrator that controls the system (Gervais, Col. 8 Lines 60-65 and Col. 9 Lines 60- 
67)). 

Regarding claim 7, Gervais teaches Gervais teaches a method for controlling access to 

business-entity data-exchange objects stored in electronic from (Gervais, Abstract). The Gervais method 
comprises: 

storing an object in as database (Gervais, FIG. 5 illustrates a database for storing "Xspan 
Briefing Center" resource as object), the object comprising distinguishable groups of data (The "Xspan 
Briefing Center" comprising "AAA Supplier Network", "Project Alpha" and "Project Omega" as 
distinguishable groups of data), 

each group of data having associated access criteria for access to the groups of data (Gervais, 

Col. 9 Lines 60-67, read and read/write access criteria); 

said data comprising multiple elements selected from the group consisting of product data, 
supply chain data, component part data, subcontracting company data, partnership data, design data, 
development data, access privilege data, trade secret data, confidential information data, business 
relationship data, business document data, business agreements data, OEM products and component 
data, CEM products and component data, bill of material data, change order data, component part 
object data, component part Unking data, component part identification data, component part number 
data, part attribute data, part affiliation data, part product context data, specifications drawing data, 
color data, size data, type data, price data, quantity data, find number data, cross reference data, related 
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information data, earlier version data, history of change data, text document data, graphics drawing 
data, other attribute data, redacted data, discovery privilege data, cost data, component parts 
specifications data, product specifications data quantity received data, quantity needed data, availability 
data, supplier type data, geographical information, and purchase order data (As Shown in FIG. 5, 
data comprising "AAA Supplier Network" as supply chain data and "Project Alpha" and 
"Project Omega" as business document data)] 

said access criteria comprising criteria selected from the group consisting of trade secret 
criteria, confidentiality among business partners criteria, established business relationship criteria, 
confidential information criteria, predetermined privileges set by the owner of the information criteria, 
host status, guest status, original equipment manufacturer status, contract equipment manufacturer 

status, and user id (Access criteria comprising read and read/write as privileges (Gervais, 
Col. 9 Lines 60-67). The read and read/write criteria are predetermined by the owner of 
the resource (Gervais, Col. 11 Lines 17-39)); 

controlling the access to data stored in the database using an application server configured to set up a 
redacted version of an object, herein termed a requested object, according to access criteria established for a user 
(EnterpriseXspan Environment Server (Col. 4 Lines 30-33) as an application server. 
EnterpriseXspan Environment Server control access to data stored in the database, e.g., "Xspan 
Briefing Center", "AAA Supplier Network", "Project Alpha" and "Project Omega" by checking 
user identity and authenticate using Lotus Domino Application (Gervais, Col. 10 Lines 1-5). The 
Lotus Domino Application determines who can read and edit the document. If a user is rejected 
by the application, that document will not appear to that rejected user (Gervais, Col. 10 Lines 6- 
13). As seen, the original version of "Xspan Briefing Center" may be viewed by individual user is 
a redacted version, e.g., documents will not appear if the user does not have access to them, 
and the documents which are redacted varies according to predetermined read access as a 
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redacted version of an object, herein termed a requested object, according to access criteria established for a user 
is controlled by Lotus Domino Application); 

storing software code for controlling the operation of said application server's CPU in said application 

server's memory (This is an inherited feature of Gervais technique. The Lotus Domino Application 

as software code for controlling the operation of EnterpriseXspan Environment Server as application 
server's CPU must be stored in EnterpriseXspan Environment Server's memory), 

transferring said requested object to a user in the form of a document file having said requested object 
and any associated documents requested by a user contained therein (FIG. 5 indicates requested object, e.g., 
"Xspan Briefing Center" is transferred to a user in the form of a document file having said requested object 
and any associated documents requested by a user contained therein, e.g., "AAA Supplier Network", 
"Project Alpha" and "Project Omega"); 

allowing controlled access to individual groups of data contained within said requested object according 
to individual user's predetermined privileges in response to said access criteria associated with said group of 

data contained within said redacted object {Each entity in the system hierarchy of containers and 
resources has both a group of users and a group of managers. The user group has read 
access and the management group has read/write access to the entity (Gervais, Col. 9 Lines 
60-67). If a user's name is not in the Reader Names field of Name and Address Book, then 
that document will not appear to the user through an interface (Gervais, Col. 10 Lines 10-13). 
The Gervais teaching indicates in response to said access criteria associated with said group of data 
contained within said redacted object, e.g., "Xspan Briefing Center" with not appear documents is a 
redacted object with respect to user that does not have user's name in the Reader Names field 
Of Name and Address Book, allowing controlled access to individual groups of data contained within said 
requested object according to individual user's predetermined privileges, e.g., access to the groups of 
data in FIG. 5 is controlled based on read and read/write privileges of that particular user); 
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in which said predetermined access of said individual user vary according to the status of the business 
partnership between the business entity and that said individual user is affiliated with and the business entity that 

controls said data exchange system (The predetermined read and read/write accesses vary according 
to the status of business partnership between the business entity that the user is affiliated with 
as in FIG. 6A and the system administrator that controls the system (Gervais, Col. 8 Lines 60-65 
and Col. 9 Lines 60-67)); 

and wherein said business entities are from different companies (Gervais, Col. 4 Lines 29-42 and 
FIG. 6A). 

Regarding claims 13, 14, 15, 16 and 19, Gervais teaches business-entity data-exchange 
device, comprising: 

a computer program storage device readable by a digital processing apparatus (A memory and CPU 
are inherited features of Gervais teaching); 

a program stored on the program storage device and including instructions executable by the digital 
processing, apparatus for controlling the apparatus to perform a method for viewing and modifying an object to 
allow a user to view and modify a redacted version of an object stored in a file (EnterpriseXspan 
Environment Server (Col. 4 Lines 30-33)), comprising: 

computer readable code means for establishing an object in a storage location (Gervais, FIG. 5 
illustrates a database for storing "Xspan Briefing Center" resource as object)] 

said object containing data comprising one or more elements selected from the group consisting of 
product data, supply chain data, component part data, subcontracting company data, partnership data, design 
data, development data, access privilege data, trade secret data, confidential information data, business 
relationship data, business documents data, business agreements data, OEM products and components data, 
CEM products and components data, bill of material data, change order data, component part object data, 
component part linking data, component part identification data, component, part number data, part attribute 
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data, part affiliation data, part product context data, specifications drawing data, color data, size data, type data, 
price data, quantity data, find number data, cross-reference data, related information data, earlier version data, 
history of change data, text document data, graphics drawing data, other attribute data, redacted data, discovery 
privilege data, cost data, component parts specifications data, product specifications data, quantity received data, 
quantity needed data, availability data, supplier type data, geographical information, and purchase order data 
(As shown in FIG. 5, data comprising "AAA Supplier Network" as supply chain data and "Project 
Alpha" and "Project Omega" as business document datd)\ 

computer readable code means for identifying a user to have limited access to information associated 

with the object (Gervais, Col. 10 Lines 1-1 3); 

computer readable code means for establishing privilege access criteria that define the scope of access of 
a version of the object for the user (Gervais, Col. 9 Lines 60-67); 

computer readable code means for receiving an object request by a requestor (Gervais, Col. 1 0 Lines 

1-13); 

computer readable code means for verifying the requestor's user privilege access criteria (Gervais, 
Col. 10 Lines 1-13); and 

computer readable code means for transmitting a redacted version of the requested object in the form of 
a redacted document that masks information according to the requestor's user privilege access criteria (FIG. 5); 

in which said user privilege access criteria vary according to the status of the business partnership 
between the business entity that said individual user is affiliated with, and the business entity that controls said 
data exchange system (The predetermined read and read/write accesses vary according to the 
status of business partnership between the business entity that the user is affiliated with as in 
FIG. 6A and the system administrator that controls the system (Gervais, Col. 8 Lines 60-65 and 
Col. 9 Lines 60-67)); and 

wherein said business entities are from different companies (Gervais, Col. 4 Lines 29-42 and FIG. 

6A). 
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Regarding claim 2, Gervais teaches all of the claimed subject matter as discussed above 
with respect to Claim 1 , Gervais further discloses access data application code enables controls the 
ability of said individual user to read the contents of said requested object that was sent by the application server 
according to access privileges associated with said individual user (Gervais, Col. 9 Lines 60-67). 

Regarding claim 3, Gervais teaches all of the claimed subject matter as discussed above 
with respect to claim 2, Gervais further discloses access data application code enables said individual 
user to modify the contents of said requested object; and store the modified contents in said memory of said 
application server (Gervais, Col. 9 Lines 60-67 and storing the modified contents in the memory is 
an inherited feature of Gervais teaching). 

Regarding claim 4, Gervais teaches all of the claimed subject matter as discussed above 

with respect to Claim 3, Gervais further discloses access data application code enables said individual 
user ability to modify includes the ability to delete information contained in said requested object; and store said 
modified requested object in said memory of said application server (Gervais, Col. 9 Lines 60-67 and 
storing the modified contents in the memory is an inherited feature of Gervais teaching). 

Regarding claim 5, Gervais teaches all of the claimed subject matter as discussed above 

With respect to Claim 3, Gervais further discloses access data application code enables said individual 
user ability add data to said requested object; and store said modified requested object in said memory of said 
application server (Gervais, Col. 9 Lines 60-67 and storing the modified contents in the memory is 
an inherited feature of Gervais teaching). 
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Regarding claim 6, Gervais teaches all of the claimed subject matter as discussed above 

with respect to claim 1 , Gervais further discloses individual user's access to the redacted version of the 
object is determined by a business relationship to produce products (Gervais, Col. 9 Lines 60-67) and 
defined by the host according to the need of information in a product chain (Gervais, Col. 8 Lines 60-65), 
and wherein said requested object is configured to reveal limited information according to a guest user's 
predetermined access privileges (Gervais, Col. 10 Lines 10-13). 

Regarding claim 8, Gervais teaches all of the claimed subject matter as discussed above 
with respect to claim 7, Gervais further discloses the steps of: 

receiving an object request by a individual user (Gervais, Col. 10 Lines 1-14); 

verifying the individual user's user privilege access criteria (Gervais, Col. 10 Lines 1-14); and 

transmitting a requested object configured to reveal information contained with in said requested object 
according to the individual user's user privilege access criteria (Gervais, Col. 10 Lines 1-14). 

Regarding claim 9, Gervais teaches all of the claimed subject matter as discussed above 
with respect to claim 7, Gervais further discloses the step of establishing a version of an object by 
loading information into the version of the object into separate groups having separate access privilege criteria 
(FIG. 5 and Col. 9 Lines 60-67). 

Regarding claim 11, Gervais teaches all of the claimed subject matter as discussed 
above with respect to claim 8, Gervais further discloses the steps of extracting the 
individual user's user identification from the object request, verifying the individual user's user identification and 
identifying the groups of data within the requested object to which the individual user has access (Col. 9 Line 
61-Col. 10 Line 20). 
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Regarding claim 12, Gervais teaches all of the claimed subject matter as discussed 
above with respect to claim 7, Gervais further discloses the step of transmitting a redacted version of 
an object by sending a requested object to the individual user that contains the groups of information to which 
the individual user has access to and that excludes groups of information associated with an object that is 
redacted so that the individual user has limited access (Col. 9 Line 61-Col. 10 Line 20). 

Conclusion 

Any inquiry concerning this communication or earlier communications from the examiner 
should be directed to HUNG Q. PHAM whose telephone number is 571-272-4040. The 
examiner can normally be reached on Monday-Friday. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, TIM T. VO can be reached on 571-272-3642. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private 
PAIR system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you 
would like assistance from a USPTO Customer Service Representative or access to the 
automated information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

HUNG Q PHAM 
Primary Examiner 
Art Unit 2168 

October 18, 2007 



